This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wxjKQfF1Bk41ieBZ61Cr0Zmqhs4.roa File: wxjKQfF1Bk41ieBZ61Cr0Zmqhs4.roa (raw, json) Hash identifier: wAHc1iDsY91RyaVZkVkeVMiZiUdHDxMwYlxgInVt1gY= Subject key identifier: C3:18:CA:41:F1:75:06:4E:35:89:E0:59:EB:50:AB:D1:99:AA:86:CE Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D634DF89CDB33DCC9B6E9816A2A00 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wxjKQfF1Bk41ieBZ61Cr0Zmqhs4.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213377 IP address blocks: 2a0e:b107:1080::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:63:4d:f8:9c:db:33:dc:c9:b6:e9:81:6a:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c318ca41f175064e3589e059eb50abd199aa86ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:52:28:d5:78:ed:f7:6f:2f:c6:01:b1:cc: 60:1c:d6:8d:b2:25:e0:46:6e:7e:71:fc:f2:d7:23: 4d:85:89:fa:c5:9d:8e:ff:9f:02:93:e2:21:37:26: ce:46:85:32:37:e8:b8:9e:5c:28:af:2d:2f:f0:e5: c1:dc:4b:91:a4:bf:f2:54:8d:3b:78:1b:45:52:6d: 51:6d:70:3d:bb:1c:6e:f6:84:e9:d7:a4:eb:66:e5: 3c:d2:39:04:bd:42:bb:f0:b4:67:0a:63:2a:87:ee: 65:2f:a9:50:27:72:65:e8:68:d1:de:f5:fd:c2:d7: 90:a2:b9:c7:79:c6:8e:18:55:a8:75:bf:d6:88:58: 0b:f7:45:d1:f5:04:a3:b3:03:76:f7:a4:db:b0:2e: 8c:84:b0:b2:64:b1:e2:e7:b8:51:96:33:91:3f:b6: 6c:78:8e:11:d4:64:85:46:e8:45:43:2a:12:2f:47: 77:51:43:1f:98:46:ad:ca:d2:e6:b3:a1:84:1d:7d: 43:dc:d6:05:6a:86:15:ad:85:97:ff:24:8c:ac:d0: c8:ce:3c:0b:ed:68:6c:1a:aa:14:28:80:7d:13:a1: 8d:61:9a:a6:c5:5a:f1:08:e4:4e:60:5f:e4:31:a6: 1b:a9:d7:72:04:1f:e4:e7:e0:34:70:b7:5a:0f:36: f6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:CA:41:F1:75:06:4E:35:89:E0:59:EB:50:AB:D1:99:AA:86:CE X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wxjKQfF1Bk41ieBZ61Cr0Zmqhs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1080::/44 Signature Algorithm: sha256WithRSAEncryption 6c:6b:96:58:0e:94:d5:09:83:40:5f:e2:88:dc:28:f0:72:09: 14:27:06:9e:60:42:4e:cf:b0:e2:86:97:18:5a:42:71:ea:bf: 1b:2e:7c:96:d9:12:42:39:ea:f9:03:70:34:20:6f:68:c8:6e: 49:98:46:eb:91:ed:c5:f2:1a:20:b5:36:c7:f7:90:25:12:3d: 16:8a:4e:12:dc:19:8c:d5:61:89:74:27:a2:66:ee:d7:5b:9d: f4:94:12:45:c6:c6:a7:27:4f:4d:72:09:fa:52:24:eb:c2:ee: bc:33:7f:ca:0e:1b:1c:f7:fd:aa:d6:05:39:b5:02:7b:ce:6e: 5a:96:f8:bf:8d:01:6d:ce:f3:f6:85:24:6d:7b:72:32:f7:d2: a9:ae:67:c6:b0:2d:59:c1:0b:99:39:42:c8:d4:55:7e:5b:8d: f3:59:8b:4b:e1:d8:35:29:a3:c3:4c:04:bf:76:e8:93:c0:1d: 1d:62:95:35:11:50:37:17:96:74:e5:51:f9:03:93:e1:e4:55: 0e:19:63:98:d6:bd:12:da:37:26:e0:c5:88:26:a0:5c:2d:2c: 33:0d:19:9c:de:27:99:97:a3:7f:9e:90:6b:fa:58:49:bb:3d: 65:9f:a2:38:56:e1:96:52:45:00:5e:bb:cf:e1:9b:8c:7d:5a: 1c:f3:b6:95 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XWNN+JzbM9zJtumBaioAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzE4Y2E0MWYxNzUwNjRlMzU4OWUwNTllYjUwYWJkMTk5YWE4NmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2JSKNV47fdvL8YBscxgHNaNsiXg Rm5+cfzy1yNNhYn6xZ2O/58Ck+IhNybORoUyN+i4nlwory0v8OXB3EuRpL/yVI07 eBtFUm1RbXA9uxxu9oTp16TrZuU80jkEvUK78LRnCmMqh+5lL6lQJ3Jl6GjR3vX9 wteQornHecaOGFWodb/WiFgL90XR9QSjswN296TbsC6MhLCyZLHi57hRljORP7Zs eI4R1GSFRuhFQyoSL0d3UUMfmEatytLms6GEHX1D3NYFaoYVrYWX/ySMrNDIzjwL 7WhsGqoUKIB9E6GNYZqmxVrxCOROYF/kMaYbqddyBB/k5+A0cLdaDzb2/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMMYykHxdQZONYngWetQq9GZqobOMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvd3hqS1FmRjFCazQxaWVCWjYxQ3IwWm1xaHM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxCA MA0GCSqGSIb3DQEBCwUAA4IBAQBsa5ZYDpTVCYNAX+KI3CjwcgkUJwaeYEJOz7Di hpcYWkJx6r8bLnyW2RJCOer5A3A0IG9oyG5JmEbrke3F8hogtTbH95AlEj0Wik4S 3BmM1WGJdCeiZu7XW530lBJFxsanJ09Ncgn6UiTrwu68M3/KDhsc9/2q1gU5tQJ7 zm5alvi/jQFtzvP2hSRte3Iy99KprmfGsC1ZwQuZOULI1FV+W43zWYtL4dg1KaPD TAS/duiTwB0dYpU1EVA3F5Z05VH5A5Ph5FUOGWOY1r0S2jcm4MWIJqBcLSwzDRmc 3ieZl6N/npBr+lhJuz1ln6I4VuGWUkUAXrvP4ZuMfVoc87aV -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:46 2026 by rpki-client